Merge branch 'main' into capital_collections

CHANGELOG.md

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+### Changed
+
+- Added note on the use of the default `*` use in route authentication dependecies. [#325](https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/pull/325)
 - Update item index naming and aliasing to allow capitalisation of collection ids [#329](https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/pull/329)
 
 ## [v3.2.2] - 2024-12-15

examples/auth/README.md

@@ -9,6 +9,11 @@ Authentication is an optional feature that can be enabled through [Route Depende
 Route dependencies for endpoints can enable through the `STAC_FASTAPI_ROUTE_DEPENDENCIES` 
 environment variable as a path to a JSON file or a JSON string.
 
+***NOTE: default dependencies***
+`*` can be used to match all paths. However, if used this must be the only Authentication dependency (multiple can be used through a 
+single merged dependency). Similarly, `*` can be used to match all methods with a route but must also be the only Authentication 
+dependency for that route.
+
 #### Route Dependency
 
 A Route Dependency must include `routes`, a list of at least one [Route](#routes), and `dependencies` a